2025

Improper input validation in the Linux kernel-mode driver for some Intel(R) 700 Series Ethernet before version 2.28.5 ma

Improper conditions check for some Intel(R) PROSet/Wireless WiFi Software for Windows before version 23.110.0.5 may allo

Improper Isolation or Compartmentalization in the stream cache mechanism for some Intel(R) Processors may allow an authe

Improper check for unusual or exceptional conditions in the Linux kernel-mode driver for some Intel(R) 800 Series Ethern

Time-of-check Time-of-use race condition for some Intel(R) Connectivity Performance Suite software installers before ver

Improper buffer restrictions for some Intel(R) Xeon(R) Processor firmware with SGX enabled may allow a privileged user t

Time-of-check time-of-use race condition in firmware for some Intel(R) Converged Security and Management Engine may allo

Hydra is a continuous integration service for Nix based projects. Prior to commit f7bda02, /api/push-github and /api/pus

In the Linux kernel, the following vulnerability has been resolved: xfrm: interface: fix use-after-free after changing

Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated atta

SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges

A heap-based buffer overflow in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.5, I

A buffer over-read vulnerability in Ivanti Connect Secure before 22.7R2.8 or 22.8R2, Ivanti Policy Secure before 22.7R1.

Log files uploaded during troubleshooting by the Harmony SASE agent may have been accessible to unauthorized parties.

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions). The affected applicat

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected a

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected a

A vulnerability has been identified in SINEC Traffic Analyzer (6GK8822-1BG01-0BA0) (All versions < V3.0). The affected a

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All ver

A vulnerability has been identified in Simcenter Femap V2406 (All versions < V2406.0003), Simcenter Femap V2412 (All ver

A vulnerability has been identified in RUGGEDCOM ROX MX5000 (All versions), RUGGEDCOM ROX MX5000RE (All versions), RUGGE

A vulnerability has been identified in SIMATIC S7-PLCSIM V17 (All versions), SIMATIC STEP 7 V17 (All versions < V17 Upda

A vulnerability has been identified in SINUMERIK 828D PPU.4 (All versions < V4.95 SP5), SINUMERIK 828D PPU.5 (All versio

The affected setup component is vulnerable to DLL hijacking. This could allow an attacker to execute arbitrary code when

A vulnerability has been identified in SIMATIC PCS neo V4.1 (All versions), SIMATIC PCS neo V5.0 (All versions), SIMATIC

A vulnerability has been identified in SIPROTEC 4 6MD61 (All versions), SIPROTEC 4 6MD63 (All versions), SIPROTEC 4 6MD6

A vulnerability has been identified in SmartClient modules Opcenter QL Home (SC) (All versions >= V13.2 < V2506), SOA Au

A low-privileged local attacker can exploit improper permissions on nssm.exe to escalate their privileges and gain admin

The B Slider- Gutenberg Slider Block for WP plugin for WordPress is vulnerable to Arbitrary Plugin Installation in all v

The UiCore Elements – Free Elementor widgets and templates plugin for WordPress is vulnerable to Arbitrary File Read in

The WooCommerce Purchase Orders plugin for WordPress is vulnerable to arbitrary file deletion due to insufficient file p

SAP NetWeaver Application Server ABAP (BIC Document) allows an authenticated attacker to craft a request that, when subm

Due to broken authorization, SAP Business One (SLD) allows an authenticated attacker to gain administrator privileges of

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0,

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1406, when processing nested tu

Vim is an open source, command line text editor. In versions from 9.1.1231 to before 9.1.1400, When processing nested tu

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0,

Stirling-PDF is a locally hosted web application that performs various operations on PDF files. Prior to version 1.1.0,

Server-Side Request Forgery (SSRF) in Omnissa Secure Email Gateway (SEG) in SEG prior to 2.32 running on Windows and SEG

CryptoLib provides a software-only solution using the CCSDS Space Data Link Security Protocol - Extended Procedures (SDL

Catalyst::Authentication::Credential::HTTP versions 1.018 and earlier for Perl generate nonces using the Perl Data::UUID

The ASPECT system allows users to bypass authentication. This issue affects all versions of ASPECT

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the

Mattermost Confluence Plugin version <1.5.0 fails to enforce authentication of the user to the Mattermost instance which

Mattermost Confluence Plugin version <1.5.0 fails to handle unexpected request body which allows attackers to crash the

Mattermost Confluence Plugin version <1.5.0 fails to check the authorization of the user to the Mattermost instance whic

Cherry Studio is a desktop client that supports for multiple LLM providers. From versions 1.4.8 to 1.5.0, there is a one

Omnissa Workspace ONE UEM contains a Secondary Context Path Traversal Vulnerability. A malicious actor may be able to ga

In the Linux kernel, the following vulnerability has been resolved: clone_private_mnt(): make sure that caller has CAP_

MacOS version of GIMP bundles a Python interpreter that inherits the Transparency, Consent, and Control (TCC) permission